Discuss February 2016

discuss@lists.centos.org

126 participants
101 discussions

Question about cleanly unmounting slave bind mounts
by likan_999.student＠sina.com 27 Feb '16

27 Feb '16

Hi, I asked the question on stackexchange (http://unix.stackexchange.com/questions/264931/centos-7-unable-to-cleanly-u…) and CentOS 7 bug report (https://bugs.centos.org/view.php?id=10414) but didn't get any useful response, so I am thinking if I can get some help here. The problem arose when I tried to rbind mount /dev and /proc to a chroot sandbox and to unmount it, I have to set the mount to slave so that unmounting submounts of <sandbox-root>/dev (e.g. /dev/pts) won't unmount submounts of /dev. This works for other distributions such as Fedora 23 and Ubuntu 14.04, but under CentOS 7, umount succeeds but the directory can't be removed. For some reason, I have to stick to CentOS 7, so I wonder if there is a work around for it. The steps to reproduce: [hidden]$ mkdir -p A B/a C/b [hidden]$ sudo mount --bind A B/a [hidden]$ sudo mount --rbind B C/b [hidden]$ sudo mount --make-rslave C/b [hidden]$ sudo umount C/b/a [hidden]$ sudo umount C/b [hidden]$ rmdir C/b rmdir: failed to remove ‘C/b’: Device or resource busy None of mount, cat /proc/mounts, cat /etc/mtab, sudo lsof, sudo fuser C/b shows any process using the directory C/b; stat C/b shows it is different inode than B, meaning it has already been unmounted successfully. The kernel version is 3.10.0-327.10.1.el7.x86_64. Any suggestion is welcomed.附件（0个）全部下载超大附件（0个）

1 0

CentOS Extras SRPMs for 7.1 / 7.2
by Pierre Riteau 26 Feb '16

26 Feb '16

Hello, I noticed that recent source repositories for CentOS Extras packages do not have SRPMs for each available RPM. In particular, I wanted to download the SRPM for cloud-init. After enabling the extras-source repository, `yumdownloader --source cloud-init` doesn't find any package. This used to work on CentOS 7.0. See the content of the following two repos: http://vault.centos.org/7.2.1511/extras/Source/SPackages/ http://vault.centos.org/7.1.1503/extras/Source/SPackages/ compared with http://vault.centos.org/7.0.1406/extras/Source/SPackages/ It looks like only packages which were updated have made it in the newer repositories. Thanks, Pierre

2 1

Internet Storm Center blogpost on rootcheck (a system auditor)
by Gilbert Sebenste 26 Feb '16

26 Feb '16

Hello everyone, If you haven't seen it: https://isc.sans.edu/forums/diary/Quick+Audit+of+NIX+Systems/20771/ I just compiled and ran it on CentOS 5 and 6. The audit came up clean for me. It's worth a run to see if you have anything blatant wrong...or to see if you have been rooted. Gilbert ******************************************************************************* Gilbert Sebenste ******** (My opinions only!) ****** *******************************************************************************

1 0

Skylake Installs on CentOS-7
by Johnny Hughes 26 Feb '16

26 Feb '16

We were informed that many people were having issues on newer intel (Skylake) platforms installing the latest CentOS-7 and asked if we could find/fix the problem. We found that the latest kernel, kernel-3.10.0-327.10.1.el7, fixes this issue on some machines, so we rebuilt the installer for people having issues. Please see this mail for the new isos: https://lists.centos.org/pipermail/centos-devel/2016-February/014444.html If you are not having issues, you will want to continue to use the standard installers as they provide better support for 3rd party kernel modules, etc. Thanks, Johnny Hughes

1 0

CentOS install disable USB keyboard on Acer AXC 603G UW13
by Juan De Mola 26 Feb '16

26 Feb '16

Hi. I am triying to set up CentOS 5 on an Acer AXC 603G UW13. The install turn off my USB keyboard between /sbin/loader and the media check prompt screen. What I can do to get the install working with the USB keyboard? Thanks. Juan De Mola molaxp(a)aol.com

5 13

IPtables block user from outbound ICMP
by John Cenile 26 Feb '16

26 Feb '16

Hello, Is it possible at all to block all users other than root from sending outbound ICMP packets on an interface? At the moment we have the following two rules in our IPtables config: iptables -A OUTPUT -o eth1 -m owner --uid-owner 0 -j ACCEPT iptables -A OUTPUT -o eth1 -j DROP But this still allows ICMP for some reason (but *does* block other TCP/UDP packets, which is what we want, as well as ICMP). Thanks.

7 8

CentOS 7 SELinux issue
by Alice Wonder 25 Feb '16

25 Feb '16

Trying to add SELinux support to my bitcoin package. Keep getting this on install: SELinux: Could not downgrade policy file /etc/selinux/targeted/policy/policy.29, searching for an older version. SELinux: Could not open policy file <= /etc/selinux/targeted/policy/policy.29: No such file or directory /sbin/load_policy: Can't load policy: No such file or directory libsemanage.semanage_reload_policy: load_policy returned error code 2. I Tried yum reinstall selinux-policy selinux-policy-targeted restorecon -R -v /etc/selinux as suggested on some mailing lists. Didn't work, same issue. How can I troubleshoot what is causing this? The policy.29 file exists. The RPM responsible for it verifies (and was reinstalled) I don't ordinarily run SELinux and do not have it enabled. Things like that are why, it always ALWAYS got in the way of productivity and when I did run it and I was never hacked without it, so... but I need to figure out what the problem is here.

4 4

Bitcoin for CentOS 7
by Alice Wonder 24 Feb '16

24 Feb '16

For those interested I have a working spec file for Bitcoin 0.12.0 https://github.com/AliceWonderMiscreations/bitcoin/blob/master/contrib/rpm/… I believe the only BuildRequires that isn't in CentOS/EPEL is miniupnpc-devel but that's trivial to build as well. With Bitcoin 0.12.0 the ECC stuff that Red Hat ripped out of OpenSSL doesn't matter anymore. -=- That spec file is somewhat based on what https://www.ringingliberty.com/bitcoin/ does for Fedora / CentOS with a couple noted differences - A) I don't have SELinux stuff (yet). His SELinux stuff is broken on CentOS 7. Only matters for the bitcoin-server package, the GUI client doesn't seem to matter. B) He uses system BerkeleyDB. I build BerkeleyDB when building bitcoin because BerkeleyDB is fragile enough that changes to it can cause a wallet that can't be read by other clients. C) He adds a patch that adds functionality needed by a very small demographic - hardware machines that sell bitcoins. I prefer to not add that patch because I prefer pristine source rather than modifying what the devs produced for a feature 99.9% of the population doesn't need. So I prefer to stick with the precise version that bitcoin.org uses in the binary builds they distribute. Happens to be same version CentOS 7 has now but that may not always be the case. It isn't with CentOS 6. Anyway if anyone one this list has interest, figured I'd share the spec file. Adding SELinux to the server package I will work on. Oh the referenced patch that is there is only needed for LibreSSL, you can comment it out to build against OpenSSL. 0.12.0 seems much faster at indexing than previous versions, and catches up faster when it is behind on blocks.

3 8

CentOS 7, odd message from nfsdcltrack
by m.roth＠5-cent.us 23 Feb '16

23 Feb '16

Is this normal, or a bug, perhaps a mismatch in two pieces (and this server was just updated late yesterday afternoon, and rebooted this morning): <timestamp> <servername> nfsdcltrack[12128]: sqlite_insert_client: insert statement prepare failed: table clients has 2 columns but 3 values were supplied mark

2 1

Substitute pdftk with other command
by Dario Lesca 22 Feb '16

22 Feb '16

Hi, I must migrate a Centos5 server on Centos7 On server Centos5 there is a shell procedure witch add to PDF a timestamp like this example: http://i.stack.imgur.com/OBsqX.png with this command: $ pdftk input.pdf stamp overlay.pdf output stamped.pdf Into Centos7 pdftk it is no longer allowed Someone knows some other command to replace it or other ways to do this? Or how I can install pdftk on Centos7. Many thanks for your help. -- Dario Lesca (inviato dal mio Linux Fedora 23 Workstation)

3 4

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss February 2016